debian-docker.yml

name: Build debian python docker image

on:
  workflow_dispatch:
    inputs:
      debian_version:
        description: 'Debian version to use as base image'
        required: true
        default: '13.5-slim'

permissions:
  contents: read
  packages: write

env:
  PLATFORMS: linux/amd64,linux/arm64
  IMAGE_NAME: python
  PYTHON_VERSION: 3.14.5
  PYTHON_SHA256: 7e32597b99e5d9a39abed35de4693fa169df3e5850d4c334337ffd6a19a36db6

jobs:
  build-and-publish-debian:
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v6
        with:
          lfs: true

      - name: Set lower-case image namespace
        id: vars
        shell: bash
        run: |
          echo "owner_lc=${GITHUB_REPOSITORY_OWNER,,}" >> "$GITHUB_OUTPUT"
          echo "image_tag=${{ env.PYTHON_VERSION }}-debian-${{ github.event.inputs.debian_version }}" >> "$GITHUB_OUTPUT"
          echo "jre_image_tag=${{ env.PYTHON_VERSION }}-debian-${{ github.event.inputs.debian_version }}-jre${{ github.event.inputs.jre_version }}" >> "$GITHUB_OUTPUT"

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v4
        with:
          platforms: ${{ env.PLATFORMS }}
      
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4
        with:
          platforms: ${{ env.PLATFORMS }}

      - name: Log in to GHCR
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push image
        id: build_loader
        uses: docker/build-push-action@v7
        env:
          SOURCE_DATE_EPOCH: 0
        with:
          context: ./
          file: ./Dockerfile.debian
          push: true
          cache-from: type=gha,scope=debian
          cache-to: type=gha,mode=max,scope=debian
          platforms: ${{ env.PLATFORMS }}
          build-args: |
            python_version=${{ env.PYTHON_VERSION }}
            python_sha256=${{ env.PYTHON_SHA256 }}
            debian_version=${{ github.event.inputs.debian_version }}
          tags: |
            ghcr.io/${{ steps.vars.outputs.owner_lc }}/${{ env.IMAGE_NAME }}:${{ steps.vars.outputs.image_tag }}